Ongoing problem

[jdannan]

I have a Cisco 831 Router that I'm trying to put on a business cable line.

I cannot get the router to see anything outside of the router. Does the config look ok?

Thank you for your help.

Using 1300 out of 131072 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname lanrouter
!
enable secret 5 .
enable password .
!
username CRWS_Prem privilege 15 password 0 $1$W1fA$o1oSEpa1038159184
username CRWS_Shashi privilege 15 password 0 $1$W1fA$o1oSEpa161697005
username CRWS_Kannan privilege 15 password 0 $1$W1fA$o1oSEpa1040563783
username CRWS_Jaidil privilege 15 password 0 $1$W1fA$o1oSEpa904997320
ip subnet-zero
!
ip audit notify log
ip audit po max-events 100
!
!
!
!
interface Ethernet0
description Internal LAN
ip address 192.168.0.1 255.255.255.0
ip nat inside
no ip mroute-cache
hold-queue 100 out
!
interface Ethernet1
description External WAN
ip address x.x.x.x 255.255.255.224
ip nat outside
no ip mroute-cache
!
ip default-gateway x.x.x.x
ip nat inside source list 1 interface Ethernet0 overload
no ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet1
no ip http server
!
!
access-list 1 permit 192.168.0.0 0.0.0.255
snmp-server community liti RO
snmp-server enable traps tty
!
line con 0
no modem enable
stopbits 1
line aux 0
stopbits 1
line vty 0 4
exec-timeout 120 0
password .
login local
length 0
!
scheduler max-task-time 5000
end

 

[baddos]

Change this:

ip nat inside source list 1 interface Ethernet0 overload

To this:

ip nat inside source list 1 interface Ethernet1 overload

Also you should point your static route to an IP address instead of just the interface.

 

[jdannan]

Ok, I did that. Somehow I accidentaly put the same ip nat outside source list 1 int etc etc. How can I remove the incorrect line?

Thanks.

 

[baddos]

no ip nat inside source list 1 interface Ethernet0 overload

 

[jdannan]

Ok, I can now ping the gateway for Ethernet1 from the router.

But I still cannot get outside of the cable network.

The workstations can ping the router, gateway.

Any ideas? Thanks.

 

[baddos]

Try this...

ip classless 
no ip route 0.0.0.0 0.0.0.0 Ethernet1 
ip route 0.0.0.0 0.0.0.0 (IP Address of Gateway)

 

[jdannan]

That worked fine!

Ok, how can I setup port forwarding on the router? I need to allow ports 25, 80, 110 to one machine on the network.

Thank you very much for your help.

 

[baddos]

ip nat inside source static tcp (myserverIP) 80 interface Ethernet1 80
ip nat inside source static tcp (myserverIP) 25 interface Ethernet1 25
ip nat inside source static tcp (myserverIP) 110 interface Ethernet1 110

 

[jdannan]

Ok that's all setup. As far as a firewall goes, the 831 router does have one on it right?

Is there any advanced configuration if so?

Thanks.

 

[jdannan]

Also, if I was to telnet into the router what would be the username? I know the enable password.

And is there a way to disable telnet into the router from the outside of the network? To just allow telnet in from 192* only?

 

[baddos]

The IOS Firewall is dependant on if you have it installed. Do a "show version" do see if you do.

Here are your usernames:

CRWS_Prem
CRWS_Shashi
CRWS_Kannan
CRWS_Jaidil

To only enable telnet access from a certain range, do this...

access-list 1 permit 192.0.0.0 0.255.255.255
line vty 0 4
access-class 1 in

 

[jdannan]

Are those default usernames? How can I edit/change those names?

What am I looking for in the show version?

Thanks

 

[baddos]

There aren't any usernames by default... You can remove them with the no username .....

The show version shows you the version and image file you are using... Then you can compare it to what is on Cisco's website.

 

[jdannan]

Thanks for all you help!

Where on cisco's web site is the IOS and is it free to download?

 

[baddos]

Nope... You'll need a SmartNET to get a CCO login. With the login, you'll be able to download the necessary software.

 

[jdannan]

Is there any other way to get the IOS software without the CCO login?

Here is my version info.

Cisco Internetwork Operating System Software
IOS (tm) C831 Software (C831-K9O3Y6-M), Version 12.2(8)YN, EARLY DEPLOYMENT RELE
ASE SOFTWARE (fc1)
Synched to technology version 12.2(11.2u)T
TAC Support:

http://www.cisco.com/tac

Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Wed 30-Oct-02 15:18 by ealyon
Image text-base: 0x800131D8, data-base: 0x8085AEE4

ROM: System Bootstrap, Version 12.2(8r)YN, RELEASE SOFTWARE (fc1)
ROM: C831 Software (C831-K9O3Y6-M), Version 12.2(8)YN, EARLY DEPLOYMENT RELEASE
SOFTWARE (fc1)

router uptime is 22 hours, 27 minutes
System returned to ROM by reload
System restarted at 10:03:05 UTC Tue Aug 24 2004
System image file is "flash:c831-k9o3y6-mz.122-8.YN.bin